DinukaNavaratna Dee Store Missing Authorization Vulnerability

A missing authorization vulnerability has been identified in DinukaNavaratna Dee Store version 1.0. This issue allows unauthorized users to access resources or perform operations without proper authorization checks. The vulnerability can be exploited remotely, affecting multiple endpoints within the application.

Impact

Exploitation of this vulnerability allows unauthorized users to perform sensitive operations within the application, potentially leading to unauthorized access or manipulation of data.

Reproduction

The vulnerability can be reproduced by sending requests to the affected endpoints without including any authentication credentials. The absence of authorization checks will allow the requests to be processed, enabling access to restricted resources or functionalities.